Paralegal, Privacy

Legal.io; United States; Remote; USD 68,880 - 82,656; Full time

Job summary

A public cybersecurity firm is seeking a Privacy Paralegal to support its US team on a fully remote, full-time basis. The role involves reviewing privacy questionnaires, managing Data Subject Access Requests, and negotiating Data Processing Agreements. Candidates should have over 4 years of experience in privacy operations and advanced knowledge of relevant U.S. privacy laws, alongside hands-on experience with OneTrust. This position offers competitive hourly pay between $50 and $60.

Qualifications

• 4+ years of experience in privacy operations or privacy law.
• Advanced experience administering OneTrust, including DSARs.
• Strong working knowledge of U.S. privacy laws, including CCPA/CPRA.

Responsibilities

• Review privacy questionnaires and vendor due diligence requests.
• Manage intake and fulfillment of Data Subject Access Requests (DSARs).
• Negotiate and review Data Processing Agreements (DPAs).

Skills

Privacy operations

Privacy law knowledge

Strong communication skills

Attention to detail

Analytical skills

Tools

OneTrust

Job description

A publicly traded cybersecurity company is seeking a Privacy Paralegal to support its US team on a contract basis.

This is a fully remote, full-time role (40 hours per week) with an anticipated 6-month duration.

Start: April 2026

Duration: 6 months

Location: US - REMOTE

Rate: $50 - 60/hour

Responsibilities

Review, assess, and respond to privacy questionnaires and vendor due diligence requests to ensure compliance with applicable U.S. privacy laws and internal privacy standards.

Manage the intake, tracking, and fulfillment of Data Subject Access Requests (DSARs), including coordination with internal stakeholders to ensure timely, accurate, and defensible responses.

Negotiate and review basic to moderately complex Data Processing Agreements (DPAs) and related privacy provisions, ensuring consistency with company-approved playbooks, standards, and risk tolerance.

What You’ll Do

• Serve as a primary administrator for the OneTrust platform, including:
• DSAR workflow configuration and optimization
• Vendor risk and privacy assessment management
• Records of Processing Activities (RoPA) maintenance
• Maintain and improve privacy operations processes, playbooks, and documentation to support scalability and audit readiness.
• Monitor and help operationalize changes to U.S. state privacy laws and applicable international privacy requirements.

What We’re Looking For

• 4+ years of experience in privacy operations, privacy law, or paralegal support, preferably in an in-house or legal operations environment.
• Advanced, hands‑on experience administering OneTrust (required), including DSARs and vendor/privacy assessments.
• Strong working knowledge of U.S. privacy laws, including CCPA/CPRA, VCDPA, CPA, CTDPA, and general understanding of GDPR and international data protection principles.
• Demonstrated experience managing DSAR workflows and negotiating DPAs or privacy contract addenda.
• High attention to detail with strong analytical and issue‑spotting skills.
• Excellent written and verbal communication skills, with the ability to translate legal requirements into operational actions.
• Proven ability to work independently, manage competing priorities, and operate effectively in a remote environment.

Legal.io is committed to the principle of equal opportunity. All employment decisions are made without regard to race, color, gender, gender identity, gender expression, sexual orientation, religion (including religious dress and grooming practices), creed, sex (including pregnancy, childbirth, breastfeeding and related medical conditions), marital status, age, national origin, ancestry, physical or mental disability, medical condition (including cancer and genetic characteristics), genetic information, military and veteran status or any other basis protected by the laws or regulations in the locations where we operate.